Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/427f1e27-9283-30da-aa3b-2a696bd15ec3.roa
File:                     427f1e27-9283-30da-aa3b-2a696bd15ec3.roa (raw, json)
Hash identifier:          oXsaMQqbmA8B58CjRQlFZNC8XHdhmKGbrAy7VdGuKRI=
Subject key identifier:   CA:35:05:1F:86:AE:97:D3:E5:84:78:5C:27:F6:97:55:BA:04:67:42
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858456F1DCCDAF258D9F6731B0F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/427f1e27-9283-30da-aa3b-2a696bd15ec3.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     396106
IP address blocks:        184.105.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:cc:da:f2:58:d9:f6:73:1b:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=1c33d7f8-f963-4640-ae4b-28e56b5829f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:97:26:aa:88:bc:d0:df:53:9c:86:fb:2b:50:
                    f6:bd:db:9e:1a:f6:cf:ab:9f:68:32:d3:7b:54:b3:
                    7a:f3:2d:85:d2:c5:85:96:8e:59:09:6a:bb:ea:3e:
                    ec:cb:21:d8:0d:7c:15:98:aa:d1:3a:34:00:db:b7:
                    58:fb:9a:bd:52:de:17:fe:45:a0:86:a1:fd:03:77:
                    9f:c5:e4:3a:88:06:84:4c:b3:53:60:af:4b:0b:74:
                    cc:8b:ed:cd:60:02:b3:c4:a2:50:bc:7c:e9:b3:9f:
                    60:a7:75:ad:d7:a9:4a:f4:60:9a:62:c5:26:8d:b0:
                    c9:77:55:75:f4:c9:9e:3b:97:c8:df:8d:94:f5:6f:
                    7f:03:76:44:a4:ec:de:94:0d:0f:79:cf:28:43:c5:
                    3b:43:6f:00:e6:1d:0c:06:be:a0:f4:0c:8f:9c:95:
                    5e:1c:39:cc:66:d2:07:b0:55:f1:16:9c:53:64:61:
                    46:9d:19:65:ee:19:2f:2e:5d:ca:7f:12:06:3e:49:
                    8c:8e:6b:0a:64:91:31:e8:1b:2b:1f:13:cd:24:08:
                    cc:9a:ca:d4:99:da:54:aa:57:fd:9e:3b:1c:be:9f:
                    eb:02:68:cb:62:f9:c9:6f:0e:12:ee:2b:b5:cf:2e:
                    7a:48:01:c8:92:cc:c8:dc:ee:06:1e:79:22:32:76:
                    37:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:35:05:1F:86:AE:97:D3:E5:84:78:5C:27:F6:97:55:BA:04:67:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/427f1e27-9283-30da-aa3b-2a696bd15ec3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:5b:74:51:b9:21:45:ba:4b:f4:99:2a:08:38:31:a9:39:13:
         f1:ac:50:b8:d7:b0:ac:fa:62:fc:a6:76:77:d9:26:d9:86:9e:
         f2:e6:eb:ce:67:2d:05:de:c3:8d:b8:0c:23:e2:aa:5a:f9:d1:
         b2:50:9f:22:70:1a:47:c2:c9:14:09:95:83:36:f0:ba:30:dc:
         5e:ba:5f:13:14:30:0e:8e:8f:f0:55:50:e4:33:ab:a9:3c:25:
         95:b0:07:62:06:67:c1:d9:ff:21:f5:b3:77:a6:9d:70:a5:2d:
         4a:e8:70:45:5e:02:03:f3:0b:94:65:d4:cb:d2:29:7b:a6:cd:
         0f:42:d8:de:b1:9d:70:a4:61:9c:74:71:a8:35:85:1e:c6:15:
         4b:b8:9f:df:c5:5b:f3:a3:35:c3:3f:93:56:72:77:42:96:31:
         b7:30:41:23:9a:fb:36:75:06:59:4e:d3:3e:20:cc:df:89:0b:
         51:03:7c:49:e6:2e:4c:dd:ec:d6:94:47:8d:e8:e3:04:59:e3:
         fd:0f:bf:bf:41:65:9c:d3:9b:91:f3:f6:66:c5:07:89:6b:12:
         6a:f2:4f:da:ec:b3:c0:a0:b9:10:23:70:78:4a:f4:dd:18:57:
         f2:e2:07:28:bf:62:97:ee:92:00:52:5c:1b:5d:85:09:fc:59:
         ed:fc:07:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:50:42 2024 by rpki-client on console-ams.rpki-client.org